Keyfactor
Software that manages digital certificates and machine identities across clouds and devices.
Keyfactor sits between certificate-issuing giants and cloud platforms that cannot easily copy its neutral position, with CyberArk as the one competitor actually built to challenge it.
Keyfactor is a software company that helps large enterprises manage digital certificates (the security keys that keep data safe) across multiple cloud providers like AWS and Azure at the same time. It is hard to copy because the big certificate companies like DigiCert and Sectigo would have to work against their own business if they tried to build the same thing, and the cloud giants cannot do it without hurting their own products. The one thing that could change everything is CyberArk/Venafi, a well-funded competitor that is trying to bundle certificate management into a bigger identity product and could start winning customers away from Keyfactor if they execute well.
Keyfactor's integration of InfoSec Global and CipherInsights shows measurable customer attrition or delay. Would show 2025 acquisitions are execution risks rather than moat additions.
DigiCert or AppViewX wins publicized agentic-AI certificate management bake-offs against Keyfactor. Would show rivals' AI/PQC marketing is translating into actual customer switches.
- Over $200M ARR, ~120% net retention
- $1B+ growth round led by Summit Partners
- Ranked #1 enterprise PKI vendor by ABI Research
- CyberArk/Venafi bundling machine identity into broader identity platform to take share.
- Integration execution failure on InfoSec Global and CipherInsights acquisitions closed May 2025.
- DigiCert's agentic-AI CLM features commoditizing routine certificate automation.
- Customer and revenue figures vary widely across third-party data vendors, clouding true scale.
| Rival | Direction | Evidence |
|---|---|---|
| CyberArk (Venafi) | contesting | Well-funded direct machine-identity rival, benchmarked head-to-head with Keyfactor as of May 2026 |
| DigiCert | contesting | Markets agentic-AI CLM features on DigiCert ONE; ranked behind Keyfactor by ABI Research Nov 18, 2025 |
| Entrust | contesting | Named second market leader after Keyfactor in ABI Research's Nov 18, 2025 PKI vendor ranking |
| Sectigo | losing to | Excluded from ABI Research's top-three PKI market leaders in Nov 18, 2025 ranking behind Keyfactor |
- Is Keyfactor profitable in 2026?
- Keyfactor has not disclosed profitability, but reported building on $200 million in annual recurring revenue with about 120% net retention as of May 13, 2025, and raised over $1 billion in growth investment led by Summit Partners on July 6, 2026, signaling strong revenue momentum rather than confirmed profit.
- Who owns Keyfactor?
- Keyfactor is privately held. As of July 6, 2026, Summit Partners led a $1 billion plus strategic growth investment, with existing backers Insight Partners and Sixth Street Growth retaining significant ownership stakes; Sixth Street first invested in October 2023 at a roughly $1.3 billion valuation.
- Who is Keyfactor's biggest competitor?
- CyberArk, via its Venafi acquisition, is Keyfactor's most direct machine-identity rival with comparable funding and platform breadth. DigiCert and Entrust also compete closely; ABI Research's November 18, 2025 ranking placed Keyfactor first, with Entrust and DigiCert as the next two market leaders.
- Could AI replace Keyfactor's certificate management business?
- Unlikely outright: PKI certificate issuance is a regulated, liability-bearing root-of-trust function requiring HSM integration and compliance credentials like FedRAMP Moderate, granted to Keyfactor's government offering on May 20, 2026. AI is instead becoming a customer, with Keyfactor issuing X.509 certificates to AI agents via Anthropic's MCP as of November 17, 2025.
- What is Keyfactor's valuation?
- Keyfactor was valued at approximately $1.3 billion enterprise value after Sixth Street Growth's minority investment on October 24, 2023. A new $1 billion plus strategic growth investment led by Summit Partners closed July 6, 2026, with Sixth Street's Alex Katz stating the company has more than doubled in size since 2023.
- Does Keyfactor support AI agent identity management?
- Yes. As of November 17, 2025, Keyfactor issues cryptographically verifiable X.509 certificates to AI agents for non-human identity, integrating with Anthropic's Model Context Protocol, and positions its platform as trust infrastructure for AI and machines, per its 2026 corporate messaging.
- 2026-07-06Announced $1B+ strategic growth investment led by Summit Partners
- 2026-05-20Keyfactor for Government CLAaaS received FedRAMP Moderate authorization
- 2026-01-29Published research finding two-thirds of firms see AI agents as bigger risk than humans
- 2025-11-19Named to Deloitte Fast 500 for sixth consecutive year, citing 210% 3yr growth
- 2025-11-18Ranked #1 enterprise PKI vendor by ABI Research
- 2025-11-17Detailed PKI-based identity issuance for agentic AI via MCP integration
- 2025-05-13Acquired InfoSec Global and CipherInsights, reported $200M ARR and 120% NRR
- 2024-02-13Exceeded $100M ARR in under five years, cited 525% three-year growth
- 2023-10-24Sixth Street Growth minority investment valued company at ~$1.3B
- 2021Merged with Sweden's PrimeKey, gaining EJBCA open-source CA engine
- Keyfactor Exceeds $100M in ARR in Less Than Five Years (2024-02-13)
- Keyfactor Bolsters Quantum Readiness With Dual Acquisitions (2025-05-13)
- Keyfactor Marks Sixth Consecutive Year on Deloitte's Fast 500 (2025-11-19)
- Strategic Product Transition (2025-05-13)
- Building Trust Infrastructure in the AI and Quantum Era (2026-07-06)
- FedRAMP Authorization Gives Federal Agencies a Clearer Path (2026-05-20)
- Keyfactor, Entrust and DigiCert Lead ABI Research's Enterprise PKI Vendor Competitive Ranking (2025-11-18)
- Keyfactor Announces $1B+ Strategic Growth Investment (2026-07-06)
- Keyfactor Announces Significant Minority Investment from Sixth Street Growth (2023-10-24)
- 3 Things to Know About Keyfactor's PKI-Based Identity for Agentic AI (2025-11-17)
- Keyfactor Acquires InfoSec Global and CipherInsights (2025-05-13)
- EJBCA Enterprise (2026-06-18)